Branch: refs/heads/master
Home:
https://github.com/tribe29/checkmk
Commit: ba545c9ccf483f6e83987261f97f571cf2a4e45f
https://github.com/tribe29/checkmk/commit/ba545c9ccf483f6e83987261f97f571cf…
Author: Sergey Kipnis <sergey.kipnis(a)tribe29.com>
Date: 2020-08-26 (Wed, 26 Aug 2020)
Changed paths:
M .werks/11460
Log Message:
-----------
11460 SECURITY Windows agent service sets correct access rights in ProgramData
directory
Previously, a standard user can write in ProgramData/checkmk/agent directory,
thereby getting a possibility to modify sensitive information.
With this fix the above mentioned vulnerability is eliminated: a standard user
has a right to read and execute.
Change-Id: Ib806ad2fb717cc0ef11246576a953ff1d179a0e9